
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/ycMLfFfi8BbbHwHAnlkuBQR0yaY.mft
File: ycMLfFfi8BbbHwHAnlkuBQR0yaY.mft (raw, json)
Hash identifier: LXlawACizwsqz5TqX5SVHOW3fn7MO2s7txxH3rVH9Dg=
Subject key identifier: 9A:7E:FD:13:47:71:A9:70:AD:80:6A:5A:BF:3C:71:68:FD:48:FD:FB
Authority key identifier: C9:C3:0B:7C:57:E2:F0:16:DB:1F:01:C0:9E:59:2E:05:04:74:C9:A6
Certificate issuer: /CN=A9199656/serialNumber=C9C30B7C57E2F016DB1F01C09E592E050474C9A6
Certificate serial: D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycMLfFfi8BbbHwHAnlkuBQR0yaY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/ycMLfFfi8BbbHwHAnlkuBQR0yaY.mft
Manifest number: C9
Signing time: Thu 21 May 2026 06:55:15 +0000
Manifest this update: Thu 21 May 2026 06:55:15 +0000
Manifest next update: Thu 28 May 2026 06:55:15 +0000
Files and hashes: 1: ycMLfFfi8BbbHwHAnlkuBQR0yaY.crl (hash: udtzdA+w8/2A/A2pFGDl8C4qKk2DIErhP/gs5/flSvo=)
2: 45D237A423E211F0A5DCED27C4F9AE02.roa (hash: 8GXEqrMUHkf0rJui+jswzfKlfWS1wjU9u2oV8cCwQ60=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/ycMLfFfi8BbbHwHAnlkuBQR0yaY.crl
rsync://rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/ycMLfFfi8BbbHwHAnlkuBQR0yaY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycMLfFfi8BbbHwHAnlkuBQR0yaY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 06:55:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 209 (0xd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199656, serialNumber=C9C30B7C57E2F016DB1F01C09E592E050474C9A6
Validity
Not Before: May 21 06:55:15 2026 GMT
Not After : May 28 06:55:15 2026 GMT
Subject: CN=6a0eac53-e352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:55:e6:35:d7:0a:91:d8:1e:fb:f6:b8:12:d3:
b0:37:45:1d:1f:5c:1d:b5:34:f1:e4:ec:38:e7:71:
d2:d8:51:8a:3c:87:1f:54:79:1e:8d:9c:0a:ed:0e:
95:03:00:99:2a:d5:75:f4:5f:54:b6:6f:e1:3d:5b:
60:c6:73:83:3e:8f:be:57:d3:6f:06:b3:79:6f:13:
27:fd:09:23:a9:b9:d9:a1:c3:31:ec:aa:53:5d:1e:
bf:89:96:20:aa:8b:d8:16:a9:96:06:c8:c1:c2:f3:
e2:45:c6:93:f2:fb:fd:85:58:84:fb:fd:1b:ba:d5:
06:d9:ee:c3:ae:be:70:96:a9:d7:61:a8:f3:a5:e3:
a5:f3:07:4e:e1:96:48:cd:a7:de:a2:d3:9d:62:1d:
0d:35:99:aa:93:34:04:66:fa:74:c7:0b:2a:0c:09:
41:b0:50:42:7b:01:7b:05:f9:90:21:8a:00:8a:eb:
c7:8d:b8:9b:5e:e8:16:0c:5e:8e:c1:c7:e0:4a:3a:
98:1c:9f:fa:2d:10:c5:15:67:2e:4a:4e:1c:53:62:
ad:ab:66:f7:a4:80:bb:b1:9d:01:25:92:8e:c6:3d:
a0:8f:65:f7:b1:bd:ae:a7:7c:bb:0a:d2:e2:91:0b:
13:6b:df:30:b3:0b:53:5f:9c:00:3c:c6:60:32:34:
b0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:7E:FD:13:47:71:A9:70:AD:80:6A:5A:BF:3C:71:68:FD:48:FD:FB
X509v3 Authority Key Identifier:
keyid:C9:C3:0B:7C:57:E2:F0:16:DB:1F:01:C0:9E:59:2E:05:04:74:C9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/ycMLfFfi8BbbHwHAnlkuBQR0yaY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycMLfFfi8BbbHwHAnlkuBQR0yaY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/ycMLfFfi8BbbHwHAnlkuBQR0yaY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:ec:15:f0:8f:b9:1a:79:de:c5:4e:35:6a:34:b5:b8:e5:f9:
7d:6e:22:b8:41:11:88:05:3f:44:d1:4c:f7:20:92:7d:e5:26:
68:75:f9:59:51:b3:d1:a3:17:e1:b8:bc:e9:92:48:d3:b5:73:
f9:a2:13:c5:f4:66:8a:01:fe:97:15:59:81:9b:e2:e0:c3:9e:
ce:fa:7a:41:ef:c1:ce:1e:6d:81:63:0e:89:de:f6:ce:25:72:
f3:b4:89:e5:bb:40:31:9c:e5:ad:cf:85:ba:46:fd:58:fc:9f:
12:f4:e8:ab:5f:2b:7a:e1:72:c3:b6:72:b9:50:d3:57:20:c4:
71:3a:a6:94:7c:93:a3:b9:2f:4b:10:67:79:d7:fb:e5:b0:98:
51:f9:fb:53:0e:e4:91:4e:c6:65:7c:60:92:8f:d5:c8:28:eb:
6c:80:3a:d7:d2:f6:24:ca:29:f7:88:ce:08:17:9a:0f:26:48:
b9:96:54:70:06:e2:fd:05:a5:3f:59:02:18:3a:1a:49:c8:45:
d3:ce:07:56:0f:ef:e2:c1:eb:fd:1e:67:c2:70:f3:a0:57:ec:
59:c3:6e:74:b7:5e:b7:19:91:68:4c:2e:52:6b:57:1a:06:c7:
4f:40:26:de:44:db:d3:81:65:f5:17:09:0b:c4:dd:0c:49:c3:
be:99:71:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:15:56 2026 by rpki-client